CVE-2022-23121

概要

参考情報

• lists.debian.org/debian-lts-announce/2023/05/msg00018.html · Mailing List
• lists.debian.org/debian-lts-announce/2023/06/msg00000.html · Mailing List
• netatalk.sourceforge.io/3.1/ReleaseNotes3.1.13.html · Release Notes
• security.gentoo.org/glsa/202311-02 · Issue Tracking
• debian.org/security/2023/dsa-5503 · Third Party Advisory
• zerodayinitiative.com/advisories/ZDI-22-527 · Third Party Advisory
• kb.cert.org/vuls/id/709991

netatalk のその他の脆弱性

• CVE-2024-38441緊急 9.8Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[len] to '\0' in FPMapName in …
• CVE-2024-38440高 7.5Netatalk before 3.2.1 has an off-by-one error, and resultant heap-based buffer overflow and segmentation violation, because of incorrectly u…
• CVE-2024-38439緊急 9.8Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[PASSWDLEN] to '\0' in FPLogin…
• CVE-2023-42464緊急 9.8A Type Confusion vulnerability was found in the Spotlight RPC functions in afpd in Netatalk 3.1.x before 3.1.17. When parsing Spotlight RPC …
• CVE-2022-43634緊急 9.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required t…